Scenario:

Two more weeks have passed and your CISO is excited about implementing the new controls and solutions that you've recommended. Your detailed analysis of the operational environment and alignment of security solutions to the business mission and goals was spot on!

You have gained confidence in the CISO and board of directors, and they've identified additional funding that may be applied towards security.

You have asked to implement VPNs year over year, and the CISO proudly tells you that it is now possible with the additional funding. He asks you to describe the best practices that you will use to implement the VPN solution, threats and exploits, and the technology that you recommend implementing.

You will:

Briefly list and explain the technology you will recommend using to setup the VPN.

List the best practices you intend to use.

Explain any potential threats and exploits, and what precautions will be taken to prevent them.